Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: VAhNN2V8mfQfVzAj58xec/2Iz/Y/kOWeFhzXaI97ino=
Subject key identifier: D7:5B:3E:C9:0D:4F:35:CD:75:8F:FC:73:E0:8E:3D:3C:6A:1C:D4:38
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 0199FBEBC03137F2D19D3287EB60298EEC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: eziXmqYHdRCb0ccfu7rI1KqLUrFT3ldAwf7Vb7oGSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:31:37:f2:d1:9d:32:87:eb:60:29:8e:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=d75b3ec90d4f35cd758ffc73e08e3d3c6a1cd438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:38:a1:e1:75:a0:82:d9:10:21:ae:77:be:
ee:fa:02:78:8a:8f:15:25:89:e5:12:c8:c0:1a:e7:
80:05:3d:43:24:b3:c8:05:6b:1b:36:a3:da:7d:d3:
4c:43:09:bd:cd:1a:ef:36:5c:9a:1f:ab:02:71:23:
6c:ff:03:03:db:d9:fb:2a:7f:95:f6:26:58:77:f9:
c9:5e:1f:3b:b1:b9:51:1a:7e:6c:d9:20:34:3e:65:
6e:56:48:ea:87:31:a7:d7:14:3e:22:5a:69:14:67:
f4:18:6a:53:9b:a2:0c:bc:89:73:41:2d:06:83:79:
9b:d3:d7:1d:6d:6e:f8:4a:2f:bf:c3:71:ab:3a:3d:
75:65:25:83:0f:a7:8e:a4:57:19:70:5e:08:d6:3c:
37:0d:d6:39:07:e1:5e:d5:d6:7a:28:95:74:de:71:
a5:cc:61:77:26:ee:ff:be:3b:24:10:81:4d:29:88:
8d:cc:cd:ee:37:08:30:1a:2b:8d:90:79:05:60:bf:
af:99:ec:2d:06:07:cb:14:da:8d:32:41:8c:b2:a1:
3c:31:5b:c9:fd:8d:93:72:2c:a4:2f:18:40:dc:8a:
84:69:5c:7a:1e:da:06:71:7d:0f:a7:98:26:a5:94:
3d:82:93:36:48:c2:18:4e:90:a2:24:98:90:cf:b7:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:3E:C9:0D:4F:35:CD:75:8F:FC:73:E0:8E:3D:3C:6A:1C:D4:38
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:7f:fd:d6:a8:71:39:b5:27:40:5b:ad:8f:07:a0:06:17:
ae:33:f1:07:0a:78:96:22:86:70:45:6a:3d:1e:1f:ab:3f:c6:
69:e5:47:6a:d5:e1:8c:52:77:ae:07:79:62:2d:87:d5:cc:63:
2c:1a:f8:71:f4:2a:57:d6:82:4a:a9:6e:50:cd:d6:82:90:13:
11:1b:fb:f8:f8:79:59:dd:73:98:90:ae:d4:6f:a9:e2:ca:28:
6c:66:f7:79:bc:ca:de:1c:42:12:61:ba:94:0d:77:1d:83:0c:
e4:5e:24:1e:22:eb:f5:f9:94:b3:37:0d:fd:9f:61:fe:c1:dd:
31:c7:7d:12:a5:3f:9c:0d:f8:60:69:0d:57:7b:5a:2d:f7:93:
b5:79:f5:6c:71:73:09:2c:b2:85:3e:24:a0:00:68:3a:b0:2a:
62:ba:a3:91:e2:2b:e2:92:46:63:8e:96:ab:d2:4c:9b:8d:2a:
c2:c3:89:32:43:97:83:22:14:41:94:97:13:e0:26:34:af:01:
f1:6f:88:bf:55:31:71:0e:ee:41:66:9c:a6:43:33:7e:10:b6:
75:51:10:fa:ac:3b:83:6d:f8:ec:d9:4c:5a:5e:21:22:7f:f6:
c6:52:13:69:ac:04:cc:c6:c3:a1:c4:41:6d:8a:74:35:e8:0a:
22:d1:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:02 2025 by rpki-client